Enable IPv6 Networking for Service Connections
Focus
Focus
Prisma Access

Enable IPv6 Networking for Service Connections

Table of Contents

Enable IPv6 Networking for Service Connections

Enable IPv6 networking for service connections in a Prisma Access deployment.
Where Can I Use This?
What Do I Need?
  • Prisma Access (Cloud Management)
  • Prisma Access (Panorama Managed)
  • Prisma Access
    license version 2.2 Preferred and later
For service connections, you can use IPv6 subnets for static or BGP routing. For BGP routing, you can enter IPv6 peer addresses and specify IPv4 and IPv6 routing options.
To configure IPv6 networking for service connections, complete the following task.

Cloud Management

  1. Select
    Manage
    Service Connections
    Service Connections Setup
    .
    If you're using Strata Cloud Manager, go to
    Workflows
    Prisma Access Setup
    Service Connections
    and
    Add Service Connection
    .
  2. Add a new service connection or select an existing service connection to edit it.
  3. Set up IPv6 routing for the service connection.
    1. (
      Static Routing Deployments Only
      ) Enter one or more
      Corporate Subnets
      in the
      Static Routes
      tab.
    2. (
      BGP Routing Deployments Only
      ) Specify the method to exchange IPv4 and IPv6 BGP routes; then, enter an IPv6
      Peer Address
      and
      Local Address
      .
      • To use a single IPv4 BGP session to exchange both IPv4 and IPv6 BGP peering information, select
        Exchange both IPv4 and IPv6 routes over IPv4 peering
        .
      • To an IPv4 BGP session to exchange IPv4 BGP peering information and an IPv6 session to exchange IPv6 BGP peering information, select
        Exchange IPv4 routes over IPv4 peering and IPv6 routes over IPv6 peering
        .
      • To use a single IPv6 BGP session to exchange IPv6 BGP peering information, select
        Exchange IPv6 routes over IPv6 peering
        .
    3. If your secondary WAN uses a different peer or local address, deselect
      Same as Primary WAN
      and enter the IPv6
      Peer Address
      and
      Local Address
      for the secondary WAN.
  4. If you have not yet completed the your service connection setup, complete it now. See Configure a Service Connection in for details.
    IPv6 internet access for service connections is enabled by an underlay connection, in which IPv6 traffic is passed through an IPv4 tunnel.
  5. Push Config
    to deploy your changes to you network.
  6. If you have not yet completed the mobile users configuration, complete it now.

Panorama

Enable IPv6 networking for service connections in a Prisma Access deployment.
  1. Select
    Panorama
    Cloud Services
    Configuration
    Service Connection
    .
  2. Add
    a new service connection or select an existing service connection to edit it.
  3. Set up IPv6 routing for the service connection.
    1. (
      Static Routing Deployments Only
      ) Enter one or more
      Corporate Subnets
      in the
      Static Routes
      tab.
    2. (
      BGP Routing Deployments Only
      ) Specify the method to exchange IPv4 and IPv6 BGP routes; then, enter an IPv6
      Peer Address
      and
      Local Address
      .
      • To use a single IPv4 BGP session to exchange both IPv4 and IPv6 BGP peering information, select
        Exchange both IPv4 and IPv6 routes over IPv4 peering
        .
      • To an IPv4 BGP session to exchange IPv4 BGP peering information and an IPv6 session to exchange IPv6 BGP peering information, select
        Exchange IPv4 routes over IPv4 peering and IPv6 routes over IPv6 peering
        .
      • To use a single IPv6 BGP session to exchange IPv6 BGP peering information, select
        Exchange IPv6 routes over IPv6 peering
        .
    3. If your secondary WAN uses a different peer or local address, deselect
      Same as Primary WAN
      and enter the IPv6
      Peer Address
      and
      Local Address
      for the secondary WAN.
  4. If you have not yet completed the your service connection setup, complete it now. See Configure a Service Connection in for details.
  5. Commit and Push
    your changes.
  6. Select
    Panorama
    Cloud Services
    Status
    Network Details
    Service Connection
    and make a note of the IPv6
    User-ID Agent Address
    and
    EBGP Router
    addresses.
    After you commit your changes, you will have an IPv6
    User-ID Agent Address
    (used for User-ID retrieval and distribution) and
    EBGP Router
    addresses for service connections.
    Because the IPSec tunnel used for the service connection uses IPv4 addressing, the
    Service IP Address
    is an IPv4 address.
    IPv6 internet access for service connections is enabled by an underlay connection, in which IPv6 traffic is passed through an IPv4 tunnel.
  7. If you have not yet completed the mobile users configuration, complete it now.

Recommended For You